BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot

By Bill Toulas

AI Summary

A UEFI bootkit dubbed BlackX, deployed in an espionage campaign in early 2026, leverages the known Baton Drop Secure Boot bypass vulnerability to load a malicious driver specifically targeting security software from Kaspersky and Avast. The bootkit's ability to survive OS reinstalls and actively subvert endpoint security products makes it a severe persistent threat requiring firmware-level detection capabilities.

Read full article → https://www.bleepingcomputer.com/news/security/bla…

Relevance score: 87.0/100

# More from October 26

1
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking The Hacker News
2
PHP2Shell security flaws now sucessfully exploited in the wild BleepingComputer
3
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations The Hacker News
5
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages SecurityWeek
6
Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs The Hacker News
7
Popular AI tool LiteLLM says unrevoked key allowed hackers to target users The Record
8
Bias in Qwen3-Coder Model Schneier on Security
9
Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware The Hacker News
10
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers The Hacker News